Description #

Microsoft Entra ID, previously Azure Active Directory, is a suite of cloud-based identity and access management tools that enable organizations to manage their users' identities and access to resources. Entra ID is a component of this suite, providing a secure, cloud-based identity management solution that offers single sign-on (SSO), multi-factor authentication (MFA), and self-service password reset capabilities, and many others.

Conditional access is a feature of Microsoft Entra ID, that allows organizations to control access to resources based on conditions such as location, device type, user risk level or different criteria. Administrators can create policies that require certain conditions to be met before a user can access a specific resource. This feature helps organizations protect their data by ensuring that only authorized users with trusted devices can access sensitive information.

IT Partner responsibilities #

1. Identify goals and objectives for Conditional Access Policy implementation.
2. Identify use-cases.
3. Configure Conditional Access policies and rules.
4. License assignment.
5. Verification and testing.

Client responsibilities  #

1. Coordinate Client resources and staff schedules.
2. Provide a dedicated point of contact responsible for working with IT Partner.
3. Coordinate any outside vendor resources and schedules.
4. Participate in the project discussion and provide all the information necessary to implement the solution.
5. Configure all network equipment, such as load balancers, routers, firewalls, and switches.
6. Review and approve engagement deliverables in a timely manner.

Prerequisites #

1. Entra ID Plan 1 or 2 license.

Plan #

1. Kickoff meeting.
2. Determination of deployment goals, objectives, and challenges.
3. Determination of use-case scenario requirements.
4. Design and configuration of the Conditional Access policies.
5. Test implementation.
6. Testing and validation.
7. Production implementation.
8. Verification and fixing of issues, if any.

Success criteria #

1. Conditional access policies are configured according to client requests, tested and working.